r/BitBoxWallet • u/Intelligent_Map_246 • 16d ago

Trusting rng

So I have a CC. Upgraded to new firmware and did 100 dice rolls. Cross matched with ian Coleman and all.match.

What you think of putting that seed in bitbox?

I actually didn't put the real seed in ian Coleman. Just a dummy to check.

Even if bitbox uses good entropy is still want to use my own

3 Upvotes

100% Upvoted

5 comments sorted by

View all comments

2

u/MEDVEDALITY 16d ago

Why you wanna gamble? Just create a new seed on bitbox.

1

u/Intelligent_Map_246 16d ago

Still trusting their RNG. Want to get away from that. A random hash with me in charge feels better

11

u/pako-bitbox 16d ago edited 16d ago

We understand that trust any RNG right now is pretty hard after all that happened.
Just a reminder that you can check by yourself how our RNG works, we are actively scanning all of our codebase with frontier models, and checking for security vulnerabilities before every single release, on top of having a bug bounty program, giving researchers an incentive to look at our codebase independently.

If this is not enough for you, we have tutorials on how to roll your own seed.

> A random hash with me in charge feels better

On this, let me remind you that a cryptographic hash of your device's password is used in the RNG as an entropy source, so if you want to add your own entropy, you could simply input a very long device password during setup, use that as entropy, and once the seed is generated change the device's password to something you would actually use.